Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1b243215-2249-474e-92b3-ad93315aa77e/bdd8578278a61c67be168497401f65b5fa42128c.roa
File:                     bdd8578278a61c67be168497401f65b5fa42128c.roa (raw, json)
Hash identifier:          VvorD8REGUw66dzRQK9tt3L3H6RHQRs/pGnidNVfqH8=
Subject key identifier:   F6:47:78:82:67:E7:53:76:AA:11:E9:EF:91:A2:03:95:89:12:37:76
Certificate issuer:       /CN=1ff1a83b43a13a21d68e8bc190f7e2c162ec8bf1
Certificate serial:       0ED6FD
Authority key identifier: 7B:3D:40:27:F3:FE:53:8D:78:88:41:31:A1:DE:5D:90:05:07:9C:B7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1ff1a83b43a13a21d68e8bc190f7e2c162ec8bf1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1b243215-2249-474e-92b3-ad93315aa77e/bdd8578278a61c67be168497401f65b5fa42128c.roa
Signing time:             Wed 02 Jun 2021 01:02:22 +0000
ROA not before:           Tue 01 Jun 2021 03:00:00 +0000
ROA not after:            Thu 01 Jun 2023 03:00:00 +0000
asID:                     14080
IP address blocks:        179.0.146.0/24 maxlen: 24
                          2801:1a:c000::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 972541 (0xed6fd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ff1a83b43a13a21d68e8bc190f7e2c162ec8bf1
        Validity
            Not Before: Jun  1 03:00:00 2021 GMT
            Not After : Jun  1 03:00:00 2023 GMT
        Subject: CN=bdd8578278a61c67be168497401f65b5fa42128c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:fe:cf:0e:e2:ff:65:5b:88:52:69:83:82:0e:
                    ff:88:e5:1a:cb:8c:09:bd:d1:e0:b6:e2:c1:b6:4c:
                    89:77:1e:b2:67:0f:97:33:1a:7d:dd:01:e0:42:c9:
                    06:e5:4f:67:f8:45:fb:e6:05:9b:70:0f:a1:e3:8c:
                    81:2d:92:64:33:47:9c:f0:eb:a8:46:a0:d3:69:a8:
                    6c:10:2e:18:77:83:48:e7:33:3b:1c:26:18:9a:ac:
                    a6:7f:cc:b6:6a:f5:35:ea:70:ce:26:7e:70:7d:b6:
                    f6:a9:21:cf:a3:20:e2:12:bc:82:28:4e:70:7b:1e:
                    11:d5:84:a9:f5:af:2b:95:13:68:11:c7:f7:cc:f8:
                    ee:00:d3:ff:b2:7b:a6:10:77:2e:34:c4:d5:d0:2c:
                    b6:29:b7:6b:76:a6:df:8a:ff:e9:b2:0b:f1:d3:a1:
                    4e:40:0a:35:b2:f5:cc:19:ea:d3:cf:29:86:85:14:
                    df:00:51:eb:36:4b:c4:e2:7a:a7:48:78:f5:94:ff:
                    b0:36:b8:4e:e6:34:aa:70:1e:f5:79:d5:7d:42:6b:
                    ec:84:6f:18:c1:9b:84:42:fb:f0:9d:9f:d5:c2:06:
                    60:10:56:72:a6:9c:7d:f9:50:61:52:a3:d0:b5:06:
                    bb:78:54:78:87:18:33:b4:06:14:d8:c6:73:60:d8:
                    f0:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:47:78:82:67:E7:53:76:AA:11:E9:EF:91:A2:03:95:89:12:37:76
            X509v3 Authority Key Identifier:
                keyid:7B:3D:40:27:F3:FE:53:8D:78:88:41:31:A1:DE:5D:90:05:07:9C:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1ff1a83b43a13a21d68e8bc190f7e2c162ec8bf1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1b243215-2249-474e-92b3-ad93315aa77e/bdd8578278a61c67be168497401f65b5fa42128c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1b243215-2249-474e-92b3-ad93315aa77e/1ff1a83b43a13a21d68e8bc190f7e2c162ec8bf1.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.146.0/24
                IPv6:
                  2801:1a:c000::/48

    Signature Algorithm: sha256WithRSAEncryption
         8b:d3:7d:19:c5:b4:a4:e7:fc:68:3a:87:fa:08:2c:bd:d7:0c:
         15:aa:01:7e:8b:64:6b:54:15:6e:f5:f0:7e:34:d6:f6:ad:9e:
         21:ab:33:82:68:bf:d2:da:e3:20:1a:1f:0a:15:ef:8c:66:db:
         84:ed:72:ac:7c:13:34:52:cb:28:a8:24:df:11:91:a0:e3:f6:
         d7:2c:b6:cf:41:f9:83:20:35:02:f2:f3:ac:48:94:01:9d:51:
         43:7f:de:f6:4a:22:b3:f1:28:33:c5:fe:e8:7c:ae:fb:08:fd:
         cb:d6:0c:f9:1f:7f:37:1f:c7:93:4e:11:b2:bd:e4:ad:53:cd:
         93:de:c1:98:4a:e1:02:b1:c3:3f:2b:02:5d:d6:4a:28:cd:c2:
         9b:a2:54:ac:f1:db:bc:fa:3e:67:d2:e9:de:ac:6d:c4:56:6e:
         1d:a4:ee:50:d9:37:6d:15:76:90:fe:14:18:fa:8d:67:6c:dd:
         83:e9:e2:27:66:87:1d:54:7b:83:11:84:51:05:51:19:12:fc:
         a4:7b:94:fd:f3:eb:bf:0c:cc:52:8c:43:3c:f1:5b:c3:42:b7:
         c2:88:cd:90:56:1a:f2:ad:43:52:64:06:7c:1a:23:6a:e2:79:
         eb:d3:c9:9f:14:87:c1:ab:1c:10:5c:70:42:34:da:7e:47:b6:
         86:92:9b:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----